6.0
Medium
CVE-2020-10749 A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious…
Description
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| containernetworking/plugins | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- groups.google.com groups.google.com
- openSUSE-SU-2020:1049 lists.opensuse.org
- openSUSE-SU-2020:1050 lists.opensuse.org
- FEDORA-2021-ccb8a9c403 lists.fedoraproject.org
Timeline
- Published
- Last modified